Cross-site scripting (XSS) vulnerability in contact_us.php in osCommerce 2.2-MS2 allows remote attackers to inject arbitrary web script or HTML via the enquiry parameter.
References
Link | Resource |
---|---|
http://marc.info/?l=bugtraq&m=110851122614995&w=2 |
Configurations
Information
Published : 2005-05-01 21:00
Updated : 2016-10-17 20:11
NVD link : CVE-2005-0458
Mitre link : CVE-2005-0458
JSON object : View
CWE
Products Affected
oscommerce
- oscommerce